f57f85c030e1765edd202faedb8d0403_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f57f85c030e1765edd202faedb8d0403_JaffaCakes118
Size

196KB
MD5

f57f85c030e1765edd202faedb8d0403
SHA1

dbfe6cb8cdb22e824fa73e4e9c3d5607f299824d
SHA256

8721c5f6a61a5ed1f3e8f1f4d479c578226aaa1fbdd5ea4cf710dec801c4e787
SHA512

64a035344ef95551645217954f664a2faf13185aee263248d439a0d8d0eab5006a8e9e61cb1230453aac0a20cc885f3a30c11fe998a79e6bf12f39dd582fe5ed
SSDEEP

3072:EJKtA7AZuZmde/zU7WfiYg6rjzx9yTY8pb/VmKVY4J1jLs:EotA7imKe/zU7sL0J/UKVBJ1jLs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f57f85c030e1765edd202faedb8d0403_JaffaCakes118

Files

f57f85c030e1765edd202faedb8d0403_JaffaCakes118
.exe windows:4 windows x86 arch:x86

367da61c5bd28d2a50bb4cbf5af404aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
LoadLibraryA
CreateFileA
ExitProcess
LCMapStringA

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegDeleteValueA
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegEnumValueA
RegOpenKeyA

Sections

.text
Size: 177KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ